exploits , vulnerabilities , articles , Cisco Unified Communications Manager PAB Synchronizer Privilege Escalation Vulnerability

Title	Cisco Unified Communications Manager PAB Synchronizer Privilege Escalation Vulnerability
Published	2009-03-11-12:00AM
Updated	2009-03-11-04:26PM
Class	Design Error
CVE	CVE-2009-0632
Remote	Yes
Local	No
Credit	Reported by the vendor
Vulnerable	Cisco Unified Communications Manager 6.1(3) Cisco Unified Communications Manager 6.1(2) Cisco Unified Communications Manager 6.1(1a) Cisco Unified Communications Manager 6.1(1) Cisco Unified Communications Manager 6.1 (2)su1 Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.0(1) Cisco Unified Communications Manager 6.0 (1a) Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1(3C) Cisco Unified Communications Manager 5.1(3a) Cisco Unified Communications Manager 5.1(3) Cisco Unified Communications Manager 5.1(2b) Cisco Unified Communications Manager 5.1(2) Cisco Unified Communications Manager 5.1(1) Cisco Unified Communications Manager 5.1 (3d) Cisco Unified Communications Manager 5.1 (2a) Cisco Unified Communications Manager 4.3(2)SR1 Cisco Unified Communications Manager 4.3(2) Cisco Unified Communications Manager 4.3(1)sr.1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.2(3)sr.2 Cisco Unified Communications Manager 4.2 (3)SR4 Cisco Unified Communications Manager 4.2 (3)SR3 Cisco Unified Communications Manager 4.2 (3)SR2b Cisco Unified Communication Manager 7.0 Cisco Unified Communication Manager 5.0
Not Vulnerable	Cisco Unified Communication Manager 7.0(2) Cisco Unified Communication Manager 6.1(3) Cisco Unified Communication Manager 5.1(3e) Cisco Unified Communication Manager 4.3(2)SR1b Cisco Unified Communication Manager 4.2(3)SR4b
Code	To exploit this issue, attackers can use readily available network utilities.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability